ShinyHunters hacks rival extortion gang and takes over its dark web site
ShinyHunters claims it hacked rival extortion gang Clop's leak site via a Grav CMS flaw and seized its onion domain.
55
Vendor
Grav CMS
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 1, 2026
- Last mentionedSep 21, 2026
Timeline
4 articles · newest firstShinyHunters hacks Clop leak site, threatens to extort ransomware gang
Extortion group ShinyHunters hacked the Clop ransomware gang's leak site, defacing it and stealing server data and onion service private keys.
62
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
ShinyHunters exploited a Grav CMS file upload flaw to breach and deface the Clop ransomware gang's leak site, claiming theft of source code, logs, and Tor private keys.
65
[webapps] Grav CMS 2.0.7 - RCE
A proof-of-concept exploit for remote code execution in Grav CMS 2.0.7 has been published on Exploit-DB.
30
Related CVEs
by mentions- CVE-2025-61882100%9.8Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing
Appears with
- ShinyHuntersthreat actor · 3
- Clopthreat actor · 3
- Oraclevendor · 2
- PTC Windchillproduct · 1
- Oracle EBSproduct · 1
- Grav CMSproduct · 1
- Instructurevictim · 1
- HackForumsorganization · 1
- BleepingComputerorganization · 1
- Philipsvictim · 1
- Oracle E-Business Suiteproduct · 1
- Scattered Lapsus$ Huntersthreat actor · 1
- Shellvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.